Overview

overview

10

Static

static

3

fb4bc7473d...18.exe

windows7-x64

10

fb4bc7473d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb4bc7473d44ce07bee37d80f83e1b50_JaffaCakes118

  • Size

    308KB

  • Sample

    240419-2ajmhaha68

  • MD5

    fb4bc7473d44ce07bee37d80f83e1b50

  • SHA1

    fc8d0c135f1beed2e689ed078004ad5c37065de2

  • SHA256

    f0c21154cd805a7dbd34733710b72a16eef2c1d8a69378c2b455e3464e795544

  • SHA512

    e4325ddfc4388fef60875549794f6ce0411999b594eaf1646f4c89e79e801bd490d146c68f5dfe5b6008718a35e165590f9e1a3f905b50c42f9d82db849a0ebb

  • SSDEEP

    6144:4QfzUmYQ6iTH+s6ltOY0OPYErU14wpHzE4yrmDW5SI:bLUmYqTHYlFPu4eYGW5SI

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      fb4bc7473d44ce07bee37d80f83e1b50_JaffaCakes118

    • Size

      308KB

    • MD5

      fb4bc7473d44ce07bee37d80f83e1b50

    • SHA1

      fc8d0c135f1beed2e689ed078004ad5c37065de2

    • SHA256

      f0c21154cd805a7dbd34733710b72a16eef2c1d8a69378c2b455e3464e795544

    • SHA512

      e4325ddfc4388fef60875549794f6ce0411999b594eaf1646f4c89e79e801bd490d146c68f5dfe5b6008718a35e165590f9e1a3f905b50c42f9d82db849a0ebb

    • SSDEEP

      6144:4QfzUmYQ6iTH+s6ltOY0OPYErU14wpHzE4yrmDW5SI:bLUmYqTHYlFPu4eYGW5SI

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks